Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/o6d5GWgRb0iGrnDHnUHH6P7IP94.roa
File: o6d5GWgRb0iGrnDHnUHH6P7IP94.roa (raw, json)
Hash identifier: gnlRgSKek+jKxc9UcvVXr+x/rZ8oNsE0/z4zrQMO8Vc=
Subject key identifier: A3:A7:79:19:68:11:6F:48:86:AE:70:C7:9D:41:C7:E8:FE:C8:3F:DE
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01948D90D3E1BCB963F7A70C6C41B07D6E2F
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/o6d5GWgRb0iGrnDHnUHH6P7IP94.roa
Signing time: Wed 22 Jan 2025 10:31:06 +0000
ROA not before: Wed 22 Jan 2025 10:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15731
IP address blocks: 103.110.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 28 Jan 2025 15:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:90:d3:e1:bc:b9:63:f7:a7:0c:6c:41:b0:7d:6e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Jan 22 10:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3a7791968116f4886ae70c79d41c7e8fec83fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:2f:38:5f:08:ec:0f:9f:fa:52:9b:41:d2:
a7:ee:03:8e:53:d8:a9:ea:75:8c:60:5b:c0:b3:a9:
01:3d:05:48:43:2e:c3:b6:1b:b1:ca:a6:65:ca:da:
b8:9a:be:84:4d:1b:7b:1e:cc:2f:78:b9:97:8f:45:
67:c2:23:ce:b4:a2:0c:f3:22:be:c5:7a:28:01:d6:
65:09:fb:4c:fd:9e:c7:c5:d2:85:4f:d2:4f:7a:d1:
96:53:95:f2:60:d8:db:a5:dc:48:79:7a:f8:9e:8e:
4d:b5:18:78:7c:43:f3:4e:4c:d0:e7:2d:67:0e:89:
c8:f1:7f:de:6a:69:d0:ea:ce:c4:3c:96:2c:35:a8:
51:3c:da:23:01:48:ce:28:c5:e2:3b:7d:4e:e1:06:
a0:38:3f:8e:09:52:4d:3f:d7:5e:35:34:e2:12:7f:
b6:70:a5:e2:90:25:61:e8:36:07:52:e5:fe:e7:ed:
90:8d:4c:07:44:73:5b:6f:c3:a7:31:4a:d5:60:75:
30:c7:89:fd:87:a8:7d:fa:42:06:d6:40:96:96:47:
34:83:19:00:79:8e:79:e0:22:52:3a:a5:77:e5:d7:
3d:1b:93:33:0a:41:13:69:2e:43:ba:90:f1:61:3e:
ac:2c:36:85:85:04:d4:36:59:3e:30:9e:9f:95:3e:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A7:79:19:68:11:6F:48:86:AE:70:C7:9D:41:C7:E8:FE:C8:3F:DE
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/o6d5GWgRb0iGrnDHnUHH6P7IP94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.110.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:cd:26:b7:93:f6:65:24:9e:20:1f:28:4f:f1:b3:9b:4b:2e:
1d:d9:d8:f8:a5:4d:78:38:1e:2b:27:dd:22:37:72:a8:06:9b:
cf:28:bf:f0:55:ad:0a:27:3e:24:82:2b:94:29:e1:70:11:7e:
5b:4d:cb:8f:10:f4:25:a9:c9:bb:4c:83:35:de:3d:34:08:b5:
c0:d8:5f:49:3f:69:2d:fe:6d:8b:3a:a0:ba:81:dc:0e:8d:d8:
ff:5f:7b:3d:77:73:78:d4:4c:0f:98:1f:3e:46:f3:54:68:4c:
dd:1d:4b:71:03:83:fb:d3:de:e4:e5:40:98:e0:96:10:29:a7:
44:59:b3:e6:3e:54:a8:12:61:31:67:f5:70:0d:66:94:ee:4c:
39:7b:34:fa:e0:8e:74:ba:58:f2:92:ed:6a:78:44:73:cf:aa:
47:66:0d:1b:0f:7b:ce:28:a3:18:a4:ec:26:95:6d:e4:8c:e6:
ed:1d:86:6d:2d:85:a2:bd:93:13:ac:06:be:18:d4:a4:a8:db:
17:97:5f:79:bb:c0:f4:92:cc:5c:97:c6:f3:1d:26:c3:0f:52:
34:2a:db:d6:d0:8f:15:14:c5:51:cb:d5:f4:e8:9e:0f:2f:93:
93:8e:86:7c:c5:f6:96:d6:5f:99:16:ff:b0:b1:b4:c8:94:91:
13:9c:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:28 2025 by rpki-client